f1.platformrijksoverheid.nl

- Rijksoverheid -

Issued by QuoVadis PKIoverheid Server CA 2020

About this certificate

This digital certificate with serial number 71:4a:67:4a:6e:1d:f9:bf:c4:58:83:7e:47:1d:33:12:84:1a:b3:3d was issued on by QuoVadis Trustlink B.V..

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Rijksoverheid

Organization: Rijksoverheid
State / Province: Zuid-Holland
Locality: 's-Gravenhage
Country: NL

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 71:4a:67:4a:6e:1d:f9:bf:c4:58:83:7e:47:1d:33:12:84:1a:b3:3d
Serial Number (int): 646775210140501977464244473762320733622335353661
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 6c:8c:31:41:7d:9c:7a:5c:ad:de:de:a5:72:6f:b1:8c:4e:04:af:98
AuthorityKeyId: 22:b7:3d:c0:4e:66:6f:58:a8:73:b0:12:df:ff:bb:d3:8e:13:98:e7

Fingerprint (sha1): 3e:d9:15:f4:f1:eb:e6:26:cf:3f:8b:24:8b:55:e5:5c:6d:93:96:ef
Fingerprint (sha256): 20:fa:38:69:1c:b9:eb:1c:05:93:6c:ed:e9:78:1f:84:6d:01:9a:18:82:2f:5a:4c:61:b1:db:05:4b:ce:96:2a

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl

Check the revocation status for certificate f1.platformrijksoverheid.nl

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f1.platformrijksoverheid.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f1.platformrijksoverheid.nl
ncadierproevenbeleid.nl
www.ncadierproevenbeleid.nl
feeds.ncadierproevenbeleid.nl
opendata.ncadierproevenbeleid.nl
english.ncadierproevenbeleid.nl
feeds.english.ncadierproevenbeleid.nl
opendata.english.ncadierproevenbeleid.nl
nvwa.nl
www.nvwa.nl
feeds.nvwa.nl
opendata.nvwa.nl
english.nvwa.nl
feeds.english.nvwa.nl
opendata.english.nvwa.nl
rda.nl
www.rda.nl
feeds.rda.nl
opendata.rda.nl
magazines.nvwa.nl
agroberichtenbuitenland.nl
www.agroberichtenbuitenland.nl
feeds.agroberichtenbuitenland.nl
opendata.agroberichtenbuitenland.nl
english.rda.nl
feeds.english.rda.nl
opendata.english.rda.nl
pulsefishing.eu
www.pulsefishing.eu
feeds.pulsefishing.eu
opendata.pulsefishing.eu
transitieproefdiervrijeinnovatie.nl
www.transitieproefdiervrijeinnovatie.nl
feeds.transitieproefdiervrijeinnovatie.nl
opendata.transitieproefdiervrijeinnovatie.nl
magazinesintern.nvwa.nl

Other certificates including the domain name platformrijksoverheid.nl

(limited to 100 certificates)
platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
opendata.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
onderzoek.rijksoverheid.nl
h1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
webanalyse.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
survey-collect.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
toegang.platformrijksoverheid.nl
a-toegang.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
a-subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
performance.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
subscribe.platformrijksoverheid.nl
d1.platformrijksoverheid.nl
a-api.a-subscribe.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
platformrijksoverheid.nl
j1.platformrijksoverheid.nl
survey.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
survey-cache.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
artifactory.rijksoverheid.nl
a-cms.platformrijksoverheid.nl
g1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
vpn.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
k1.platformrijksoverheid.nl
onderzoek.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
c-cms.platformrijksoverheid.nl
elearning.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
ps1.platformrijksoverheid.nl
l1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b2.platformrijksoverheid.nl
b1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
f1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
a1.platformrijksoverheid.nl
api.subscribe.platformrijksoverheid.nl
cms.platformrijksoverheid.nl
h1.platformrijksoverheid.nl
i1.platformrijksoverheid.nl
e1.platformrijksoverheid.nl
c1.platformrijksoverheid.nl
j1.platformrijksoverheid.nl
platformrijksoverheid.nl

Certificate

The complete raw certificate details for f1.platformrijksoverheid.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37gt2UcvJs72LAyf1YCh
gg2UnIJbhMTwGaQZgr8mrOIyk45yLTcp675rZ6nmDgQGa6UGEfUkN+kuvVNrzlNM
1A3dTjyUPvmmOzUfKzbgPJjTEKc7Ps+ASFvApjV0vwuEjmeB58DiZBdqsVhpkr5M
Qju/BlK/gVWgWeF48zeDINQwwQt91v4SsVg9dnpE4TSWKIb0fEEEnogi53zaylNk
++T90smSquCHcznU+zzxGNL1elOyE6+tUvliVs0EN11TUxI2PTYKe4720LZIrwO2
jmx4hY8qQC7JQt+yNbbOk3UcTtahNZhJTNPduLYw89ippqJKMx2AAOM+KN6R01Xo
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 646775210140501977464244473762320733622335353661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis PKIoverheid Server CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 18:07:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-27 18:17:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String ''s-Gravenhage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rijksoverheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'f1.platformrijksoverheid.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28241964104975185607526770853624291539469599933405831411984992625990609611716390316590078123502935034299954519429934464391221317960896892392799222031475543382096245235052858219843449719574688348530252484544590750723724349510792241311167530096802503196467459974421741620918950672331965862031928781075285584395064136148281426221157187186516075877743412770859296074299934253681673670922362635688369421900931223995029307015003576001386997381632510888419444641305466690965271875782538347920928693977214161416535762659410041266464337935372631204846190887391312188056109468450493631113561148431161127104800274148766499858513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 22b73dc04e666f58a873b012dfffbbd38e1398e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadispkioverheidserverca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (930 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1.platformrijksoverheid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncadierproevenbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncadierproevenbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.ncadierproevenbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.ncadierproevenbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.ncadierproevenbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.english.ncadierproevenbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.english.ncadierproevenbeleid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvwa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvwa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.nvwa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.nvwa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.nvwa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.english.nvwa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.english.nvwa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.rda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.rda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.nvwa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agroberichtenbuitenland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agroberichtenbuitenland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.agroberichtenbuitenland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.agroberichtenbuitenland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.rda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.english.rda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.english.rda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsefishing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pulsefishing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.pulsefishing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.pulsefishing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitieproefdiervrijeinnovatie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transitieproefdiervrijeinnovatie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.transitieproefdiervrijeinnovatie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.transitieproefdiervrijeinnovatie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazinesintern.nvwa.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 82 0 101 0 108 0 105 0 97 0 110 0 99 0 101 0 32 0 111 0 110 0 32 0 116 0 104 0 105 0 115 0 32 0 99 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 98 0 121 0 32 0 97 0 110 0 121 0 32 0 112 0 97 0 114 0 116 0 121 0 32 0 97 0 115 0 115 0 117 0 109 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 114 0 101 0 108 0 101 0 118 0 97 0 110 0 116 0 32 0 81 0 117 0 111 0 86 0 97 0 100 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 105 0 111 0 110 0 32 0 80 0 114 0 97 0 99 0 116 0 105 0 99 0 101 0 32 0 83 0 116 0 97 0 116 0 101 0 109 0 101 0 110 0 116 0 32 0 97 0 110 0 100 0 32 0 111 0 116 0 104 0 101 0 114 0 32 0 100 0 111 0 99 0 117 0 109 0 101 0 110 0 116 0 115 0 32 0 105 0 110 0 32 0 116 0 104 0 101 0 32 0 81 0 117 0 111 0 86 0 97 0 100 0 105 0 115 0 32 0 114 0 101 0 112 0 111 0 115 0 105 0 116 0 111 0 114 0 121 0 46]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadispkioverheidserverca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c8c31417d9c7a5caddedea5726fb18c4e04af98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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